Monday, November 6
TOP STORY
Tor’s fall harvest: the next generation of onion services and Tormoil fixed
HACKTIVITY
Any user with invite capabilities can take-over any account on Discourse [45 upvotes] - $1,024 bounty for this report to Discourse by @mishre.
DOM-based XSS in store.starbucks.co.uk on IE 11 [13 upvotes] - $100 bounty for this report to Starbucks by @albinowax with credit to @garethheyes
You can see all the latest and greatest disclosures and bounties on www.hackerone.com/hacktivity
TWEET OF THE DAY
Jdwp exposed to the internet. You’re gonna have a bad time. - @seanmeals
OTHER ARTICLES WE’RE READING
SAVE Act: Securing America’s Voting Equipment Act of 2017. See Sec. 304 “Bug bounty programs”
CertStream – See SSL certs as they're issued in real time
Anime streaming service Crunchyroll hijacked to distribute malware
ABOUT ZERO DAILY
Zero Daily is a daily newsletter that highlights application security, bug bounty, and hacker focused topics. The content is curated with love by @luketucker and brought to you by HackerOne.
Friends don’t keep good things to themselves - forward this to your homies and co-workers. BTW, want to see who runs bug bounties?
Have a news tip / story to highlight? We’d love to hear about it. Email: zerodaily@hackerone.com
Get this email forwarded to you? Click here to subscribe to the Zero Daily
Hacking: Exciting.
Finding bugs: Exciting.
Fixing those bugs: Not exciting.
HackerOne is the #1 hacker-powered security platform, helping organizations find and fix critical vulnerabilities before they can be criminally exploited. As the contemporary alternative to traditional penetration testing, our bug bounty program solutions encompass vulnerability assessment, crowdsourced testing and responsible disclosure management. Discover more about our security testing solutions or Contact Us today.